Is python-dateutil (PyPI) safe to install?

Is python-dateutil safe? PyPI package security — ShadowCanopy

Safe to use

Deep-scanned by ShadowCanopy — no threats found in its code, dependencies, or network behavior.

Scanned 11/4/2026

Approvedpython-dateutil@4.0.0View on registry ↗latest: 4.0.0

All findings are false positives. The package is the legitimate python-dateutil library. 'Obfuscation' matches are normal null-byte skipping in a date lexer, Arabic-Indic digit test cases, and base64 TZ data. 'Hardcoded IP' matches are timestamps (e.g. 23:18:41, 12:30:00) and RFC section numbers in docs/comments. No malicious behavior of any kind is present in the supplied source.

Protect your projects free

AI breakdown

Plain-English summary of what this package does and how it behaves.

python-dateutil extends the standard Python datetime module with parsing, relative deltas, rrule, and timezone support.

Capabilities

Contains obfuscated source files (multiple)
Contains hardcoded public IPs in network code (multiple)

Data access

None observed

Network

Hardcoded public IP in network code (multiple instances)

Static findings flag repeated obfuscated files and hardcoded public IPs; no scripts or dependencies are declared in the manifest.

Dependency & execution chain

Every package this one pulls in, colored by verdict. Expand to walk the tree.

2 packages2 direct

python-dateutil@4.0.026 findings

tzdata@2026.6

Security findings (26)

Static analysis rule matches, with the exact code that triggered them.

mediumObfuscated source fileATK-023src/dateutil/parser/_parser.py

Multiple obfuscation patterns in src/dateutil/parser/_parser.py

mediumObfuscated source fileATK-023python_dateutil-4.0.0/src/dateutil/parser/_parser.py

Multiple obfuscation patterns in python_dateutil-4.0.0/src/dateutil/parser/_parser.py

mediumObfuscated source fileATK-023tests/test_tz.py

Multiple obfuscation patterns in tests/test_tz.py

mediumObfuscated source fileATK-023python_dateutil-4.0.0/tests/test_tz.py

Multiple obfuscation patterns in python_dateutil-4.0.0/tests/test_tz.py

highHardcoded public IP in network codeATK-028docs/conf.py

File docs/conf.py contains a hardcoded public IP (23:18:41) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028python_dateutil-4.0.0/docs/conf.py

File python_dateutil-4.0.0/docs/conf.py contains a hardcoded public IP (23:18:41) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028src/dateutil/rrule.py

File src/dateutil/rrule.py contains a hardcoded public IP (3.8.2.4) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028python_dateutil-4.0.0/src/dateutil/rrule.py

File python_dateutil-4.0.0/src/dateutil/rrule.py contains a hardcoded public IP (3.8.2.4) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028src/dateutil/utils.py

File src/dateutil/utils.py contains a hardcoded public IP (12:30:00) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028python_dateutil-4.0.0/src/dateutil/utils.py

File python_dateutil-4.0.0/src/dateutil/utils.py contains a hardcoded public IP (12:30:00) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028src/dateutil/parser/_parser.py

File src/dateutil/parser/_parser.py contains a hardcoded public IP (4:30:21) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028python_dateutil-4.0.0/src/dateutil/parser/_parser.py

File python_dateutil-4.0.0/src/dateutil/parser/_parser.py contains a hardcoded public IP (4:30:21) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028src/dateutil/parser/isoparser.py

File src/dateutil/parser/isoparser.py contains a hardcoded public IP (00:00:00) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028python_dateutil-4.0.0/src/dateutil/parser/isoparser.py

File python_dateutil-4.0.0/src/dateutil/parser/isoparser.py contains a hardcoded public IP (00:00:00) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028src/dateutil/tz/_tzfile.py

File src/dateutil/tz/_tzfile.py contains a hardcoded public IP (00:00:00) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028python_dateutil-4.0.0/src/dateutil/tz/_tzfile.py

File python_dateutil-4.0.0/src/dateutil/tz/_tzfile.py contains a hardcoded public IP (00:00:00) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028src/dateutil/tz/tz.py

File src/dateutil/tz/tz.py contains a hardcoded public IP (03:30:00) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028python_dateutil-4.0.0/src/dateutil/tz/tz.py

File python_dateutil-4.0.0/src/dateutil/tz/tz.py contains a hardcoded public IP (03:30:00) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028tests/test_isoparser.py

File tests/test_isoparser.py contains a hardcoded public IP (14:33:09) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028python_dateutil-4.0.0/tests/test_isoparser.py

File python_dateutil-4.0.0/tests/test_isoparser.py contains a hardcoded public IP (14:33:09) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028tests/test_parser.py

File tests/test_parser.py contains a hardcoded public IP (10:36:28) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028python_dateutil-4.0.0/tests/test_parser.py

File python_dateutil-4.0.0/tests/test_parser.py contains a hardcoded public IP (10:36:28) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028tests/test_tz.py

File tests/test_tz.py contains a hardcoded public IP (02:00:00) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028python_dateutil-4.0.0/tests/test_tz.py

File python_dateutil-4.0.0/tests/test_tz.py contains a hardcoded public IP (02:00:00) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028tests/test_tzfile.py

File tests/test_tzfile.py contains a hardcoded public IP (02:15:45) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028python_dateutil-4.0.0/tests/test_tzfile.py

File python_dateutil-4.0.0/tests/test_tzfile.py contains a hardcoded public IP (02:15:45) used in network code — review for hidden exfiltration or C2 endpoints.

Package metadata

LicenseUnknown

Extensions to the standard Python datetime module

Files in package (156)

CONTRIBUTING.mdpython_dateutil-4.0.0/CONTRIBUTING.mdNEWSpython_dateutil-4.0.0/NEWSREADME.rstpython_dateutil-4.0.0/README.rstrequirements-dev.txtpython_dateutil-4.0.0/requirements-dev.txttox.inipython_dateutil-4.0.0/tox.inichangelog.d/template.rstpython_dateutil-4.0.0/changelog.d/template.rstci_tools/run_tz_master_env.shpython_dateutil-4.0.0/ci_tools/run_tz_master_env.shdocs/Makefilepython_dateutil-4.0.0/docs/Makefiledocs/changelog.rstpython_dateutil-4.0.0/docs/changelog.rstdocs/conf.pypython_dateutil-4.0.0/docs/conf.pydocs/easter.rstpython_dateutil-4.0.0/docs/easter.rstdocs/examples.rstpython_dateutil-4.0.0/docs/examples.rstdocs/index.rstpython_dateutil-4.0.0/docs/index.rstdocs/make.batpython_dateutil-4.0.0/docs/make.batdocs/parser.rstpython_dateutil-4.0.0/docs/parser.rstdocs/relativedelta.rstpython_dateutil-4.0.0/docs/relativedelta.rstdocs/requirements-docs.txtpython_dateutil-4.0.0/docs/requirements-docs.txtdocs/rrule.rstpython_dateutil-4.0.0/docs/rrule.rstdocs/tz.rstpython_dateutil-4.0.0/docs/tz.rstdocs/tzwin.rstpython_dateutil-4.0.0/docs/tzwin.rst

How ShadowCanopy checks PyPI packages

ShadowCanopy blocks every dependency by default and only lets through what it can verify — against live malicious-package advisories, an AI behavior scan, and a byte-for-byte hash check. It protects installs across npm, PyPI, crates.io, pkg.go.dev, RubyGems, Maven Central, NuGet, Packagist, Hex, pub.dev, Swift Package Manager.

Protect your projects free See what's being blocked

Other PyPI packages

requests urllib3 flask django numpy pandas boto3 pytest pip setuptools pyyaml cryptography

This report reflects ShadowCanopy's threat intelligence at page load and is informational, not a warranty. Canonical URL: https://shadowcanopy.dev/packages/pypi/python-dateutil

python-dateutil — deep security report